Lucene search
+L

15208 matches found

Kitploit
Kitploit
added 2026/09/06 5:34 a.m.3 views

dex

dex - A federated OpenID Connect provider Dex is an identity service that uses OpenID Connect to drive authentication for other apps. Dex acts as a portal to other identity providers through "connectors." This lets dex defer authentication to LDAP servers, SAML providers, or established identity...

6AI score
SaveExploits0References10
Kitploit
Kitploit
added 2026/09/06 3:29 a.m.3 views

IMDSpoof

IMDSPOOF IMDSPOOF is a cyber deception tool that spoofs an AWS IMDS service. One way that attackers are able to escalate privileges or move laterally in a cloud environment is by retrieving AWS Access keys from the IMDS service endpoint located at...

5.3AI score
SaveExploits0
Kitploit
Kitploit
added 2026/09/06 2:26 a.m.4 views

CVE-2025-5777-CitrixBleed

CVE-2025-5777-CitrixBleed CitrixBleed-2 CVE-2025-5777 – exploit de prueba de concepto para NetScaler ADC/Gateway “fuga de memoria” CVE-2025-5777 es una lectura crítica fuera de los límites no autenticada en Citrix NetScaler ADC/Gateway modo Gateway o AAA vServer. Una única solicitud manipulada...

9.3CVSS8.2AI score0.99962EPSS
SaveExploits20
Kitploit
Kitploit
added 2026/09/06 1:18 a.m.3 views

gitleaks

Gitleaks ┌─○───┐ │ │╲ │ │ │ ○ │ │ ○ ░ │ └─░───┘ root@kitploit: !WARNING Gitleaks está completo en cuanto a funcionalidades. No estoy incorporando nuevas funciones en Gitleaks. Las versiones futuras serán solo parches de seguridad. Estoy centrando mi atención en Betterleaks license:...

5.8AI score
SaveExploits0
Kitploit
Kitploit
added 2026/09/06 12:34 a.m.5 views

oauth2-proxy

OAuth2 Proxy is a flexible, open-source tool that can act as either a standalone reverse proxy or a middleware component integrated into existing reverse proxy or load balancer setups. It provides a simple and secure way to protect your web applications with OAuth2 / OIDC authentication. As a...

5.9AI score
SaveExploits0References19
Kitploit
Kitploit
added 2026/09/06 12:25 a.m.1276 views

github-dorks

Github Dorks Github Search is a quite powerful and useful feature that can be used to search for sensitive data on repositories. Collection of Github dorks can reveal sensitive personal and/or organizational information such as private keys, credentials, authentication tokens, etc. This list is...

5.6AI score
SaveExploits0References5
Kitploit
Kitploit
added 2026/09/05 11:23 p.m.4 views

EvilSlackbot

EvilSlackbot Un marco de ataque para Slack para realizar ejercicios de Red Team y phishing en espacios de trabajo de Slack. Aviso legal Esta herramienta está destinada únicamente a profesionales de la seguridad. No utilice esta herramienta contra ningún espacio de trabajo de Slack sin permiso...

5.9AI score
SaveExploits0
Kitploit
Kitploit
added 2026/09/05 10:28 p.m.5 views

token-reverser

Token Reverser Generador de listas de palabras para descifrar tokens de seguridad. Instalación root@kitploit: $ git clone https://github.com/dariusztytko/token-reverser.git Ejemplo de uso 1. Estás probando la función de restablecimiento de contraseña 2. El token de restablecimiento de contraseña ...

6AI score
SaveExploits0References1
Kitploit
Kitploit
added 2026/09/05 10:28 p.m.3 views

wardn

wardn A credential firewall for AI agents. The headline claim is structural, not policy: agents receive placeholder tokens, never real API keys. The real key crosses only one network seam — inside the wardn proxy, on its way to the upstream API — and is stripped from responses before they reach t...

6AI score
SaveExploits0References3
Kitploit
Kitploit
added 2026/09/05 10:04 p.m.9 views

SEDATED

The SEDATED® Project Sensitive Enterprise Data Analyzer To Eliminate Disclosure focuses on preventing sensitive data such as user credentials and tokens from being pushed to Git. Table of Contents Purpose Setup Clone down SEDATED® Update .example files Customize /config/customconfigs.sh variables...

5.8AI score
SaveExploits0
Kitploit
Kitploit
added 2026/09/05 10:01 p.m.6 views

spacesiren

SpaceSiren SpaceSiren es un administrador de honey tokens y sistema de alertas para AWS. Con esta aplicación completamente serverless, puedes crear y gestionar honey tokens a escala -- hasta 10 000 por instancia de SpaceSiren -- a un costo casi nulo.1 Cómo Funciona SpaceSiren proporciona una API...

5.9AI score
SaveExploits0References1
Kitploit
Kitploit
added 2026/09/05 8:24 p.m.67 views

xssless

xssless An automated XSS payload generator written in python. Usage 1. Record requests with Burp proxy 2. Select requests you want to generate, then right click and select "Save items" 3. Use xssless to generate your payload: ./xssless.py burpexportfile 4. Pwn! A more detailed tutorial can be fou...

5.4AI score
SaveExploits0
Kitploit
Kitploit
added 2026/09/05 8:21 p.m.4 views

openCRX-CVE-2020-7378

openCRX-CVE-2020-7378 Toma de control de cuenta no autenticada Explota la vulnerabilidad de restablecimiento de contraseña en OpenCRX, CVE-2020-7378. Una implementación sigilosa en Python para CVE-2020-7378 El exploit se debe a que los desarrolladores usaron la clase Random de java.util.Random pa...

9.1CVSS8.1AI score0.02617EPSS
SaveExploits1
Kitploit
Kitploit
added 2026/09/05 7:34 p.m.3 views

lsawhisper-bof

LSA Whisperer BOF Un puerto de Cobalt Strike Beacon Object File BOF de LSA Whisperer — la herramienta que habla directamente con los paquetes de autenticación de Windows a través de la interfaz de cliente no confiable/confiable de LSA, sin tocar la memoria del proceso LSASS incluso cuando PPL y...

6AI score
SaveExploits0References2
Kitploit
Kitploit
added 2026/09/05 7:04 p.m.43 views

talisman

Talisman A tool to detect and prevent secrets from getting checked in Table of Contents What is Talisman? Installation Install onto path recommended approach Installation as a global hook template Configuring a project...

5.8AI score
SaveExploits0References2
Kitploit
Kitploit
added 2026/09/05 6:40 p.m.7 views

java-insecure-random-cve-2021-27568

java-insecure-random-cve-2021-27568 Demo of CVE-2021-27568: Insecure randomness in token generation...

5.9CVSS6.9AI score0.0291EPSS
SaveExploits1
Kitploit
Kitploit
added 2026/09/05 6:32 p.m.3 views

HATCHA

HATCHA CAPTCHA proves you're human. HATCHA proves you're not. HATCHA H yperfast A gent T est for C omputational H euristic A ssessment is a reverse CAPTCHA that gates access behind challenges trivial for AI agents but painful for humans — large-number multiplication, string reversal, binary...

6AI score
SaveExploits0References4
Kitploit
Kitploit
added 2026/09/05 6:29 p.m.7 views

coalmine

Cloud Canary Token Management — Deploy, monitor, and rotate deceptive credentials across AWS and GCP to detect unauthorized access. !WARNING Alpha Version — Coalmine is in early development. Basic functionality is the current priority, and the application should not be considered fully security...

5.9AI score
SaveExploits0References3
Kitploit
Kitploit
added 2026/09/05 6:11 p.m.7 views

peirates

Peirates ¿Qué es Peirates? Peirates, una herramienta de penetración para Kubernetes, permite a un atacante escalar privilegios y moverse lateralmente a través de un clúster de Kubernetes. Automatiza técnicas conocidas para robar y recopilar tokens de cuentas de servicio, secretos, obtener ejecuci...

6AI score
SaveExploits0References4
Kitploit
Kitploit
added 2026/09/05 5:52 p.m.5 views

shhgit

🚨 shhgit ya no se mantiene. Si necesitas soporte o consultoría para tus esfuerzos de escaneo de secretos, envíame un correo electrónico a [email protected] 🚨 shhgit ayuda a proteger a los equipos de desarrollo, operaciones y seguridad con visión de futuro al encontrar secretos en su código...

6.1AI score
SaveExploits0References4
Rows per page
Query Builder